Cookie Policy
Legal Entity: Ritt & Royce d/b/a Ritt & Royce / Trade License HQ
Platform: Trade License HQ — tradelicensehq.com
Last Updated: May 1, 2026
Applies To: All users of the Trade License HQ platform and website
1. Introduction
Who We Are
Trade License HQ is a platform operated by Ritt & Royce, doing business as Ritt & Royce / Trade License HQ, a Michigan limited liability company ("we," "us," "our," or "Trade License HQ"). We provide business licensing compliance tools and related services through our platform at tradelicensehq.com (the "Service").
What This Policy Covers
This Cookie Policy explains how Trade License HQ uses cookies and similar browser-based technologies — including local storage and session storage — when you access or use our Service. It describes:
- What cookies and similar technologies are, and how they work generally
- The specific cookies and browser storage mechanisms we use (and do not use)
- Our third-party analytics provider and why it requires no cookies
- Your rights and the choices available to you
- The legal framework governing our use of these technologies
This policy should be read alongside our Privacy Policy, which covers our broader data collection and processing practices. If you have questions about personal data that are not addressed here, our Privacy Policy is the appropriate reference.
Our Philosophy
We believe in minimal, purposeful tracking. We use only what is strictly necessary to operate the Service. We do not track you for advertising purposes. We do not build behavioral profiles. We do not sell your data. We do not share it with ad networks, data brokers, or any other third parties for commercial purposes.
This Cookie Policy reflects that commitment: we use exactly one cookie, it exists solely to keep you logged in, and we have deliberately chosen an analytics provider that operates without cookies and without collecting personal data.
2. What Are Cookies and Similar Technologies?
2.1 What Are Cookies?
Cookies are small text files that a website causes your web browser to store on your device (computer, phone, or tablet) when you visit that site. Each cookie contains a name, a value, an expiration date, and metadata specifying which website set it and under what conditions it should be sent back to the server.
When you make a subsequent request to a website that has set a cookie on your device, your browser automatically includes that cookie in the request — allowing the website to recognize you, recall your previous interactions, or maintain a session across multiple page loads.
Cookies were introduced in 1994 to solve a fundamental limitation of the HTTP protocol: the protocol is "stateless," meaning the server has no inherent memory of prior requests. Without cookies (or similar mechanisms), a website could not distinguish one page request from another or know that two requests came from the same user.
2.2 First-Party vs. Third-Party Cookies
| Type | Definition | Example |
|---|---|---|
| First-party cookie | Set by the website domain you are visiting (e.g., tradelicensehq.com) | Login session cookies |
| Third-party cookie | Set by a domain other than the one you are visiting, typically via embedded scripts, advertising networks, or tracking pixels | Ad network tracking, social media pixels |
First-party cookies are generally considered less privacy-invasive because they are under the direct control of the website operator and are scoped to that website only. Third-party cookies have historically been the primary mechanism for cross-site behavioral tracking and targeted advertising.
Trade License HQ uses only first-party cookies. We set no third-party cookies of any kind. See Sections 3 and 5 for details.
2.3 Session Cookies vs. Persistent Cookies
| Type | Definition | Behavior |
|---|---|---|
| Session cookie | Exists only for the duration of a single browser session | Deleted when you close your browser |
| Persistent cookie | Has an explicit expiration date set by the server | Remains on your device until it expires or you delete it |
Session cookies are commonly used for ephemeral authentication states; persistent cookies are used for longer-lasting preferences, logins, and tracking across multiple visits.
2.4 The Four Functional Categories of Cookies
The industry and regulatory community generally recognize four functional categories:
| Category | Description | Consent Required (EU/UK)? |
|---|---|---|
| Essential / Strictly Necessary | Required for the website or application to function. Without these, core features like authentication or security cannot operate. | No — consent exempt |
| Analytics / Performance | Collect information about how visitors use the website (page views, traffic sources, error rates). | Yes, unless cookieless and anonymous |
| Functional / Preference | Remember user preferences and settings (e.g., language, layout) across sessions. | Yes |
| Marketing / Advertising | Track users across sites to build behavioral profiles for targeted advertising and remarketing. | Yes |
Trade License HQ uses cookies only in the Essential / Strictly Necessary category.
2.5 Browser-Based Storage: localStorage and sessionStorage
In addition to cookies, modern web browsers support two additional forms of client-side storage:
localStorage: A persistent key-value store maintained by the browser, scoped to a specific origin (domain). Unlike cookies, data stored in localStorage is not automatically sent to the server with each request — it remains entirely on your device. It persists across browser sessions until explicitly cleared by the application or the user.
sessionStorage: Functionally similar to localStorage but scoped to a single browser tab or window session. Data stored in sessionStorage is automatically cleared when the tab or window is closed.
Unlike cookies, neither localStorage nor sessionStorage transmit data to servers automatically. They are not governed by the same HTTP mechanisms as cookies, but they are subject to the same principles in this Policy. See Section 4 for our specific disclosure of how we use these technologies.
2.6 Tracking Pixels and Web Beacons
Tracking pixels (also called web beacons or clear GIFs) are tiny, invisible images (often 1x1 pixels) embedded in web pages or emails. When your browser loads the page or email, it fetches the pixel from a third-party server, which logs the request — including your IP address, browser, timestamp, and the page or email that triggered the load. This allows third parties to track whether a page was visited or an email was opened.
Trade License HQ does not use tracking pixels, web beacons, or clear GIFs of any kind.
2.7 Device Fingerprinting
Device fingerprinting is a tracking technique that collects a set of characteristics about your browser and device — such as screen resolution, installed fonts, browser plug-ins, time zone, hardware concurrency, and rendering behavior — to construct a statistical "fingerprint" that can identify or re-identify you across sessions without relying on cookies.
Trade License HQ does not use device fingerprinting of any kind.
3. Cookies We Use — Complete Inventory
The following table is the complete and exhaustive inventory of cookies set by Trade License HQ.
| Cookie Name | Set By | Category | Purpose | Duration | Deletable by User? |
|---|---|---|---|---|---|
session |
Trade License HQ (Flask-Login) | Essential / Strictly Necessary | Stores an encrypted session token that authenticates your login and maintains your authenticated session across page requests. The cookie value is cryptographically signed and encrypted — it contains no personally identifiable information in readable form. Without this cookie, the Service cannot identify your session and you cannot access any authenticated features of the platform. | 7 days from the time of login, or immediately upon logout — whichever occurs first | Yes, but deleting this cookie will immediately terminate your session and log you out. You will not be able to log back in until cookies from tradelicensehq.com are re-enabled in your browser. |
The above table represents the complete and exhaustive list of cookies set by Trade License HQ. We do not set any other cookies — not now, and not through any embedded third-party content, scripts, widgets, or services. If you observe any cookie set on the tradelicensehq.com domain other than session, we would appreciate you reporting it to us at info@tradelicensehq.com so we may investigate.
About the session Cookie
The session cookie is set by Flask-Login, a standard authentication component of the Flask web framework. The cookie value is a Base64-encoded, cryptographically signed payload. It does not contain your name, email address, or any other personally identifiable information in plaintext. The encrypted token is validated server-side on each request to confirm your identity and maintain continuity of your authenticated session.
This cookie is set only when you log in and is cleared when you log out (or when it expires after 7 days of inactivity). It is marked HttpOnly (inaccessible to JavaScript) and transmitted only over HTTPS, in accordance with modern security best practices.
4. Browser-Based Storage (localStorage and sessionStorage)
In addition to the session cookie described above, Trade License HQ may use the browser's built-in localStorage and sessionStorage APIs for limited, non-tracking purposes.
4.1 localStorage Usage
Trade License HQ may store limited user interface state in localStorage. Current and anticipated uses include:
- Dismissed notifications: Whether a user has dismissed a dashboard alert or informational banner, so that it does not reappear on subsequent visits.
- UI preferences: Minor interface preferences that are not stored server-side.
Important characteristics of our localStorage usage:
- Data stored in localStorage is stored entirely on your device. It is not transmitted to our servers.
- It contains no personal data — only interface state values (e.g., a flag indicating that a particular notification was dismissed).
- It is used solely to improve your experience within the Service.
- It is not used for tracking, advertising, analytics, or user profiling of any kind.
4.2 sessionStorage Usage
Trade License HQ may use sessionStorage for temporary in-session UI state — for example, to track the state of a multi-step form or workflow within a single browser session. Data stored in sessionStorage:
- Is automatically cleared when you close the browser tab or window.
- Is never transmitted to our servers.
- Contains no personal data.
- Is not used for tracking or profiling.
4.3 How to Clear localStorage and sessionStorage
You can inspect and clear localStorage and sessionStorage at any time using your browser's developer tools. Detailed instructions are provided in Section 8.5.
Clearing localStorage will reset any locally stored UI preferences — for example, previously dismissed notifications may reappear. It will not log you out of Trade License HQ (unlike deleting the session cookie).
5. Third-Party Cookies
Trade License HQ does not use any third-party cookies. No cookie is set on your device by any domain other than tradelicensehq.com while you are using our Service.
To be specific, we explicitly confirm that we do not use any of the following:
| Technology | Provider | Status |
|---|---|---|
| Google Analytics | Not used | |
| Google Ads / DoubleClick cookies | Not used | |
| Facebook (Meta) Pixel | Meta Platforms | Not used |
| LinkedIn Insight Tag | Not used | |
| Twitter / X advertising pixel | Twitter / X Corp | Not used |
| TikTok Pixel | ByteDance | Not used |
| Hotjar (session recording / heatmaps) | Hotjar | Not used |
| FullStory (session recording) | FullStory | Not used |
| Intercom (with tracking cookies) | Intercom | Not used |
| Drift (with tracking cookies) | Drift | Not used |
| Zendesk (with tracking cookies) | Zendesk | Not used |
| Affiliate tracking cookies | Various | Not used |
| A/B testing tools using persistent cookies | Various | Not used |
| CDN-based behavioral tracking | Various | Not used |
| Social media share buttons with embedded trackers | Facebook, Twitter, LinkedIn, etc. | Not used |
| Any other third-party tracking or advertising cookie | Any | Not used |
Verification
You can independently verify that no third-party cookies are set by using your browser's developer tools:
- Open Trade License HQ in your browser.
- Open Developer Tools (typically F12 or right-click → Inspect).
- Navigate to Application (Chrome/Edge) or Storage (Firefox) in the developer tools panel.
- Select Cookies → tradelicensehq.com.
You will see exactly one cookie: session. No cookies from any other domain will be present.
6. Analytics
Trade License HQ does not currently use any analytics platform. We do not embed any third-party analytics scripts, tracking pixels, or data-collection tools on our platform. No information about your browsing behavior on Trade License HQ is sent to any analytics service.
7. What We Do Not Use
For the avoidance of doubt, Trade License HQ explicitly confirms that we do not use the following technologies:
- Advertising cookies or pixels of any kind — we do not run digital advertising campaigns that require retargeting or conversion tracking infrastructure on our own platform.
- Retargeting or remarketing tools — we do not serve ads based on your prior visits to Trade License HQ.
- Cross-site behavioral tracking — we have no mechanism to observe or record your behavior on websites other than tradelicensehq.com.
- Device fingerprinting — we do not derive or store a device fingerprint.
- Session recording or heatmap tools — we do not record your keystrokes, mouse movements, scroll depth, or screen activity. Tools such as Hotjar, FullStory, Microsoft Clarity, or Mouseflow are not installed on our platform.
- Third-party live chat widgets with tracking — we do not use live chat widgets that set tracking cookies or transmit behavioral data to third parties.
- Embedded social media feeds or share buttons — we do not embed social media widgets that track users on behalf of platforms such as Facebook, Twitter, LinkedIn, or Instagram.
- Any technology that creates a persistent profile of individual users across sessions or across websites.
You will not be tracked for advertising purposes when using Trade License HQ.
8. Your Cookie Rights and How to Manage Cookies
8.1 Legal Framework
The use of cookies and similar technologies is governed by several overlapping regulatory regimes. Below is a summary of the frameworks relevant to our users.
EU ePrivacy Directive (2002/58/EC, as amended by 2009/136/EC) — "The Cookie Law"
Article 5(3) of the ePrivacy Directive requires that consent be obtained before information is stored on, or accessed from, a user's device — unless the storage or access is strictly necessary for the provision of a service explicitly requested by the user.
The session cookie we set falls squarely within this strictly necessary exemption: without it, the authenticated features of Trade License HQ cannot function, and it is set only in response to a user's deliberate act of logging in. No consent is required for this cookie under the ePrivacy Directive.
UK Privacy and Electronic Communications Regulations 2003 (PECR), as amended
PECR implements similar principles in the United Kingdom. Regulation 6 requires informed consent for cookies unless they are "strictly necessary for the provision of an information society service requested by the subscriber or user." Our session cookie qualifies for this exemption. No consent is required under PECR.
GDPR Article 6 — Lawful Basis for Processing
To the extent any personal data is processed in connection with our use of the session cookie, the lawful basis under GDPR Article 6(1)(b) (processing necessary for the performance of a contract) applies — the session cookie is required to deliver the Service to authenticated users. We do not rely on consent as a lawful basis for the session cookie.
CCPA / CPRA (California Consumer Privacy Act, as amended)
Under the CCPA/CPRA, California residents have rights regarding the sale and sharing of personal information. We do not sell personal information collected via cookies or any other mechanism. The session cookie does not contain personal information in a form that could be sold or shared. No CCPA opt-out mechanism is required or displayed in connection with our cookie practices.
Cookie Consent Banner
Trade License HQ displays an informational cookie notice. Our only cookie is strictly necessary (ePrivacy Directive / PECR exempt) — no consent is legally required. We do not use any analytics, advertising, or tracking cookies. The notice is shown as a transparency measure so visitors are aware of our minimal cookie use.
8.2 Browser Controls — Managing Cookies
You can control, restrict, or delete cookies through your browser settings at any time. The following links provide browser-specific instructions:
| Browser | Instructions |
|---|---|
| Google Chrome | chrome://settings/cookies — Chrome Cookie Settings |
| Mozilla Firefox | Firefox Cookie Controls |
| Safari (macOS) | Safari for Mac Cookie Settings |
| Safari (iOS / iPadOS) | Safari for iPhone / iPad Cookie Settings |
| Microsoft Edge | Edge Cookie Settings |
| Opera | Opera Cookie Settings |
| Samsung Internet | Samsung Internet Cookie Settings |
You can also explore browser-agnostic resources from privacy organizations such as the Electronic Frontier Foundation for additional guidance on browser privacy controls.
Important: If you block or delete the
sessioncookie, you will be immediately logged out of Trade License HQ and will be unable to log back in until cookies from tradelicensehq.com are re-enabled in your browser. Because this is our only cookie, your ability to use the authenticated Service depends entirely on this cookie being permitted. Blocking cookies from tradelicensehq.com is equivalent to disabling your ability to log in.
General guidance for most browsers:
- To block all cookies: Navigate to your browser's privacy or security settings and select the option to block cookies. Note the consequence described above.
- To delete specific cookies: Use your browser's developer tools (see Section 8.5) to locate and delete the
sessioncookie from tradelicensehq.com specifically, without affecting other sites. - To allow cookies only for specific sites: Most browsers support exception lists — you can block cookies globally while whitelisting tradelicensehq.com.
8.3 Do Not Track (DNT)
"Do Not Track" is a browser-level signal that can be enabled in your browser settings, intended to communicate to websites that you do not wish to be tracked. It is transmitted as an HTTP header (DNT: 1) with each page request.
Trade License HQ honors the spirit of Do Not Track. We already do not track users across websites, do not build behavioral profiles, and do not engage in any of the practices that the DNT signal was designed to discourage.
However, there is no standardized, legally binding technical implementation of DNT signals. No law in any jurisdiction currently requires websites to respect DNT headers, and there is no consistent industry standard for what compliance means. Because our data practices are already consistent with the intent of DNT regardless of the signal, we do not alter the functionality or data collection behavior of the Service based on whether a DNT header is present.
8.4 Global Privacy Control (GPC)
Global Privacy Control (GPC) is a browser-level privacy signal, established under the CPRA and recognized under certain US state privacy laws, that communicates a user's opt-out of the "sale" or "sharing" of personal data. It is transmitted as an HTTP header (Sec-GPC: 1).
Trade License HQ does not sell or share personal data — with anyone, for any commercial purpose. Our data practices are already fully consistent with what a GPC opt-out would request.
We acknowledge the GPC signal as a meaningful expression of user privacy preferences, and we respect the intent behind it. Because our existing data practices satisfy what GPC is designed to achieve, no change in our data handling is triggered by detection of a GPC signal — we are already operating at or beyond the standard that GPC conveys.
8.5 Clearing localStorage and sessionStorage
To inspect or clear localStorage and sessionStorage, use your browser's built-in developer tools:
Google Chrome / Microsoft Edge
- Press F12 (or right-click the page and select Inspect) to open Developer Tools.
- Select the Application tab.
- In the left sidebar, expand Storage → Local Storage → https://tradelicensehq.com to view localStorage entries.
- Expand Session Storage → https://tradelicensehq.com to view sessionStorage entries.
- Right-click any entry and select Delete to remove it, or click Clear All to remove all entries for this origin.
Mozilla Firefox
- Press F12 (or right-click the page and select Inspect) to open Developer Tools.
- Select the Storage tab.
- Expand Local Storage or Session Storage in the left panel.
- Select the entry to view or delete stored values.
Safari (macOS)
- Enable the Develop menu: Safari → Settings → Advanced → "Show features for web developers."
- From the Develop menu, select Show Web Inspector.
- Select the Storage tab.
- Expand Local Storage or Session Storage to view and manage entries.
Note: Clearing localStorage will reset any UI preferences stored locally on your device — for example, dashboard notifications you previously dismissed may reappear. This does not log you out of Trade License HQ, as localStorage is separate from the
sessioncookie.
9. Cookie Consent
Because Trade License HQ uses only one cookie — which is strictly necessary for the operation of the authenticated Service — we operate as follows:
- We do not display a cookie consent banner or pop-up.
- We do not require you to click "Accept Cookies," "Manage Preferences," or make any cookie selections as a condition of using the Service.
- This approach is fully compliant with the EU ePrivacy Directive (Article 5(3)), the UK PECR (Regulation 6), and GDPR, because strictly necessary cookies are explicitly exempt from consent requirements under all of these frameworks.
- No implied or explicit consent is collected in connection with the
sessioncookie, because consent is not the applicable legal basis. The applicable basis is the technical necessity of the cookie to deliver the Service.
Future Changes
If we introduce any cookies that are not strictly necessary — for example, analytics cookies, preference cookies, or any marketing cookies — we commit to the following:
- We will implement an appropriate, compliant cookie consent mechanism before any such cookies are set.
- We will update this Cookie Policy to accurately reflect any new cookies.
- We will provide registered users with at least 30 days' advance notice via email before any non-essential cookies are introduced.
- Non-essential cookies will not be set without affirmative, specific, and informed consent where legally required.
We currently have no plans to introduce such cookies. Our commitment to minimal, purposeful tracking is a feature, not a temporary state.
10. Changes to This Cookie Policy
We will update this Cookie Policy if our cookie practices change — whether due to changes in our technical infrastructure, changes in the law, or changes in our services.
Material Changes
A "material change" is one that meaningfully affects the types of cookies used, the categories of tracking deployed, or your rights. For material changes:
- We will notify registered users by email at the address associated with their account.
- Notice will be provided at least 30 days before the change takes effect, giving you time to review and, where applicable, exercise your rights.
- The updated Policy will be posted at tradelicensehq.com/legal/cookies with the new Last Updated date.
Non-Material Changes
Non-material changes — such as clarifications, formatting improvements, or corrections that do not affect your rights or our practices — will be reflected by updating the Last Updated date at the top of this Policy without advance notice. We encourage you to review this Policy periodically.
Change History
A history of significant changes to this Cookie Policy is available upon request. Please contact us at info@tradelicensehq.com with the subject line "Cookie Policy Change History."
11. Contact Us
If you have questions, concerns, or requests related to this Cookie Policy, please contact us:
Trade License HQ
Ritt & Royce d/b/a Ritt & Royce / Trade License HQ
Michigan, United States
Email: info@tradelicensehq.com
Subject line for cookie inquiries: Cookie Policy Inquiry
We aim to respond to all inquiries within 5 business days.
For broader questions about how we collect, use, and protect your personal data — including your rights under GDPR, CCPA, or other applicable privacy laws — please refer to our Privacy Policy.
This Cookie Policy was prepared for Ritt & Royce d/b/a Ritt & Royce / Trade License HQ. It reflects our actual technical cookie and tracking practices as of the Last Updated date above. We make no use of cookies or tracking technologies beyond what is explicitly described in this document.
Legal References
- EU ePrivacy Directive: Directive 2002/58/EC of the European Parliament and of the Council, as amended by Directive 2009/136/EC, Article 5(3)
- UK PECR: Privacy and Electronic Communications (EC Directive) Regulations 2003 (SI 2003/2426), Regulation 6, as amended
- GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council, Articles 4(1), 6(1)
- CCPA/CPRA: California Consumer Privacy Act of 2018 (Cal. Civ. Code §§ 1798.100–1798.199), as amended by the California Privacy Rights Act of 2020